Akira Hits Safe Mode: Ransomware Rebooting Around EDR
Acknowledgments: Special thanks to Dray Agha for his help in analysing this attack. Akira has become one of the most prolific ransomware operations and was…
Category: ThreatIntelligence-IncidentResponse
CVE-2026-68820 Is in KEV. What BOD 26-04 Requires Now
Executive Summary CVE-2026-68820 is an actively exploited Windows vulnerability listed in CISA’s Known Exploited Vulnerabilities (KEV) Catalog, with a remediation deadline as suggested by CISA…
Oracle Critical Security Patch Update August 2026
Oracle addresses 925 CVEs in its August 2026 Critical Security Patch Update with 943 patches, including 154 critical updates. Key Takeaways The August 2026 Critical…
Fake Refund Scam Hits Shopify Shop App Users
Special thanks to Justin Cook and Matt Poto for their contributions to this investigation and writeup. Scammers are reimagining the classic fake refund scam with…
Education Under Attack: The Pattern Behind Recent University Breaches
Every few weeks this year, a headline lands that reads almost the same way: a university confirms a data breach, a criminal group claims a…
10 Hacker Summer Camp Standouts at Black Hat and DEF CON
Another year, another epic Hacker Summer Camp session. There were stickers galore. There was LineCon. Cliff Stoll took over a threat hunting panel. People decried…
MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer
Picture this: You’ve just unboxed a shiny new Macbook, and now you’re downloading all of your favorite apps. You type “How to install Claude Code…
Azure cloud security: Detect cloud ransomware with Tenable One
Learn how Tenable One Cloud Exposure helps you unmask the sophisticated tactics of cybercrime group Storm-0501, which carries out Azure-based cloud ransomware campaigns. Tenable One…
Metasploit Wrap Up: Lot of summer shells and fit http profiles
This wrap-up brings a full-on shell parade. Thirteen shiny new modules landed, starting with a buffet of RCEs. WordPress WP2Shell, Ghost CMS, Joomla JCE, Langflow,…
API Discovery Gap: The APIs Attackers Find Before You Do
Hidden API Estate And AI-speed Recon Are Reshaping Modern Application Risk Key Takeaways Unknown APIs create unattributed exposure, and such exposure rarely gets tested. Attackers…
Qualys Introduces Real-Time Cloud Security Posture Management (CSPM) for Faster Risk Detection and Remediation
Key Takeaways Cloud environments change continuously, while security still relies on periodic scans, leaving gaps where risks go undetected. That gap becomes exposure. Qualys Real-Time…
Microsoft’s August 2026 Patch Tuesday Addresses 398 CVEs (CVE-2026-68820)
42Critical 355Important 1Moderate 0Low Microsoft addresses 398 CVEs in the eighth Patch Tuesday of 2026, with three zero-days, including one that was exploited in the…